General
- Target 2026-07-30_ffed58c7f22353be7b92a19a41480e98_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.5MB
- Sample260730-bcnq5awdpc
- SHA256 3eb59629ab3696631a19acb49826ce6b81075977a7ef3ea618d157ad298003a4
- MD5 ffed58c7f22353be7b92a19a41480e98
- SHA1 c08d016666e20cd39ef15390496da0391444cddb
- SHA512 599cafd4e6582a4be2ad81a64b4004ea201d559a77ed218f9630cde7a727a4f198a1569e6e62c13cd39f54dbafaf6192adb5bb5ab0843123ae6a9295287b4172
- SSDEEP 393216:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZT2:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYs
- TLSH T15D376B03F2E541E9E0AAD174CE7697319B32BC5A4BF1A5DF224076D42E36AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-30_ffed58c7f22353be7b92a19a41480e98_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_ffed58c7f22353be7b92a19a41480e98_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_ffed58c7f22353be7b92a19a41480e98_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar
- Size 22.5MB
- SHA256 3eb59629ab3696631a19acb49826ce6b81075977a7ef3ea618d157ad298003a4
- MD5 ffed58c7f22353be7b92a19a41480e98
- SHA1 c08d016666e20cd39ef15390496da0391444cddb
- SHA512 599cafd4e6582a4be2ad81a64b4004ea201d559a77ed218f9630cde7a727a4f198a1569e6e62c13cd39f54dbafaf6192adb5bb5ab0843123ae6a9295287b4172
- SSDEEP 393216:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYZT/yZ/K0ttYZT2:zyZ/K0ttYZT/yZ/K0ttYZTfyZ/K0ttYs
- TLSH T15D376B03F2E541E9E0AAD174CE7697319B32BC5A4BF1A5DF224076D42E36AD07B38721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Drops file in Drivers directory
-
Adds Run key to start application